home

pmxg.dll

PremierOpinion

VoiceFive, Inc.

The component is part of the TMRG platform which will track various behaviors of web browsing habits including tracking sites and domains visited as well as ads clicked. The module pmxg.dll by VoiceFive has been detected as adware by 22 anti-malware scanners. Part of RelevantKnowledge, a program typically installed via a software bundle (with the user's knowledge should they read the EULA) and will run in the background collecting and monitoring information about the user's behavior in order to build an extensive profile.
Publisher:
VoiceFive, Inc.  (signed and verified)

Product:
PremierOpinion

Version:
1, 3, 334, 1

MD5:
dbcf1c26f699b6545ad72d0b711e33be

SHA-1:
7f284ae9d2cb641c49f871f9beddaa7c70d7c012

SHA-256:
244858d7bd781ca09f0275fac10d8321f5966abd39d6d08ce9625159aab23c45

Scanner detections:
22 / 68

Status:
Adware

Analysis date:
4/27/2024 1:21:39 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.RelevantKnowledge.1
397

Agnitum Outpost
Adware.RelevantKnowledge
7.1.1

avast!
Win32:PUP-gen [PUP]
2014.9-160104

AVG
Skodna.Generic_r
2017.0.2875

Baidu Antivirus
Adware.Win32.RelevantKnowledge
4.0.3.1614

Bitdefender
Gen:Variant.Adware.RelevantKnowledge.1
1.0.20.20

Comodo Security
UnclassifiedMalware
20047

Emsisoft Anti-Malware
Gen:Variant.Adware.RelevantKnowledge
8.16.01.04.10

ESET NOD32
Win32/Adware.RK.AM (variant)
10.10703

F-Prot
W32/A-84a95dff
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.RelevantKnowledge.1
11.2016-04-01_2

G Data
Gen:Variant.Adware.RelevantKnowledge
16.1.24

Kaspersky
not-a-virus:Monitor.Win32.RK
14.0.0.868

Malwarebytes
Adware.PremierOpinion
v2016.01.04.10

McAfee
Artemis!CE580F1EAE22
5600.6531

MicroWorld eScan
Gen:Variant.Adware.RelevantKnowledge.1
17.0.0.12

NANO AntiVirus
Trojan.Win32.RK.crhqpp
0.28.0.57029

nProtect
Trojan-Clicker/W32.RelevantKnowledge.226328
14.11.10.01

Reason Heuristics
PUP.TMRG.VoiceFive (M)
16.1.4.10

Trend Micro House Call
TROJ_GEN.F47V0410
7.2.4

VIPRE Antivirus
Marketscore.RelevantKnowledge
34690

Zillya! Antivirus
Adware.RelevantKnowledge.Win32.21
2.0.0.1980

File size:
217.1 KB (222,272 bytes)

Product version:
1, 3, 334, 1

Copyright:
Copyright (C) 2001-2008

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\premieropinion\components\pmxg.dll

Digital Signature
Signed by:
VoiceFive, Inc.

Authority:
Thawte, Inc.

Valid from:
9/27/2011 5:00:00 PM

Valid to:
9/27/2013 4:59:59 PM

Subject:
CN="VoiceFive, Inc.", O="VoiceFive, Inc.", L=Reston, S=Virginia, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3EDFC5EA7AAD2A20B9C31AE68DC1005C

File PE Metadata
Compilation timestamp:
3/22/2012 1:48:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:BeBsmvaugA4GXGCn4WN6qS+/v7R1ORCXBLU4+mx5tfQ35ABK:uBgA4GJ4M6A/TculU4RQeBK

Entry address:
0x10254

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 5D, 90, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9...
 
[+]

Entropy:
6.3546

Code size:
144 KB (147,456 bytes)

Remove pmxg.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.